mirror of
https://github.com/reddit-archive/reddit.git
synced 2026-04-27 03:00:12 -04:00
VOrAdminSecret: don't check modhash on GET requests.
This commit is contained in:
committed by
Neil Williams
parent
e8318400e4
commit
633c250490
@@ -908,8 +908,9 @@ def make_or_admin_secret_cls(base_cls):
|
||||
|
||||
# import here so that we don't close around VModhash
|
||||
# before r2admin can override
|
||||
from r2.lib.validator import VModhash
|
||||
VModhash(fatal=True).run(request.POST.get("uh"))
|
||||
if request.method.upper() != "GET":
|
||||
from r2.lib.validator import VModhash
|
||||
VModhash(fatal=True).run(request.POST.get("uh"))
|
||||
|
||||
return False
|
||||
return VOrAdminSecret
|
||||
|
||||
Reference in New Issue
Block a user